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Amendment, filed 2/18/10, has been entered. Claims 2-19 and 21-23 remain pending. 



Claim Rejections - 35 USC § 103 

1 . Claims 2-19, 21-23 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
McCloghrie (US 6,035,105) in view of Chase (US 6,081,524). 

2. Regarding claims 2, 5, 6, 9 and 10, McCloghrie substantially teaches the limitations of 
claims: 

A packet communication apparatus, method and system to transmit a packet from a first network 
to a second network (LAN switch 103 interconnecting two networks 102 on Fig. 1 and 2:33-49, 
wherein each network comprises multiple VLANs, as also shown on Fig. 3), wherein the packet 
includes destination address (inherently part of any packet, because a destination address is 
essential for any packet routing) and a Virtual Private Network/VPN identifier (each VLAN 
identifies each frame/packet with a VLAN identifier 1:50-65, shown on Fig. 1 and 2 as tag 107) 
used to identify first VPN in the first network comprising: 

A packet generating unit/router which generates a second VPN identifier used to identify 
a second VPN in the second network based on the destination address and information in the first 
VPN identifier (LAN switch 103 on Fig. 1 and 3:7-14 generating a second header by changing 
tag 107 as shown on Fig. 2 and 3:49-67, changing the first VLAN identifier to a second VLAN 
identifier of the corresponding second VLAN network, as described on 1 :59-63); and 

A transmitter, which transmits a packet having thereto said second VPN identifier (LAN 
switch 103 on Fig. 1 and 3:7-14 changing VLAN identifier 1 :59-63) 
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wherein the first VPN is interconnected to the plurality of VPNs in the second network (first 
VLAN 106, shown on an upper portion of Fig. 1, interconnected through LAN switch 103 to a 
second network 102, shown on the bottom portion of Fig. 1, comprising multiple VLANs with 
unique names, as shown on Fig. 3 and disclosed on 5:35-47). 

McCloghrie teaches the networks as LANs utilizing the packets with MAC address 
(disclosed on 4:33-44) and use of layers 2 and 3 in the LAN switch 103 operation (disclosed on 
2:42-46 and 3:24-37). 

McCloghrie does not teach implementing his method in IP environment, wherein the 
packets are IP packets and VPN identifiers are on Layer 2 and the destination IP address is on 
layer 3. 

Chase teaches identifying Virtual Private Networks in IP environment, as switch 402 to 
connect a frame relay (or ATM) network to Virtual Private IP networks VPN A and VPN B, 
shown on Fig. 7 and 9 and disclosed on 5:45-6:12 and 6:51-7:12, wherein layer 2 frames carry 
layer 3 address information, which is extracted and used for routing the frames in Virtual Private 
IP networks, as disclosed on 3:25-41, including IP address on 4:42-44. 

It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to add implementing his method in IP environment, wherein the packets are IP packets 
and VPN identifiers are on Layer 2 and the destination IP address is on layer 3 to the system of 
McCloghrie to implement the method in widely used IP networks, like Internet. 

In addition, regarding claim 6, McCloghrie teaches receiving the packet (3:7-14). 
3. Regarding claims 3, 7 and 11, McCloghrie teaches replacing the first identifier with the 
second identifier (VLAN identifier replacement process 1 :59-63). 
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4. Regarding claims 4, 8 and 12, McCloghrie teaches a route decision processing unit (LAN 
switch 103) which routes the packet to the second network according to the destination address 
(MAC address 4:33-44) and information in the first header (VLAN identifier/tag 107 4:62-64) 
using IP address of Chase instead of MAC address, as shown above. 

5. Regarding claims 13, 16, 17 and 21, McCloghrie substantially teaches the limitations of 
claims: 

A packet communication apparatus, method and system to transmit a packet from a first 
network to a second network (LAN switch 103 and two networks 102 on Fig. 1 2:33-49, each 
network comprises appropriate VLAN), wherein the packet includes destination address 
(inherently part of any packet, because a destination address is essential for packet routing) and a 
first VPN identifier (each VLAN identifies each frame/packet with a VLAN identifier 1 : 5 0-65, 
shown on Fig. 1 and 2 as tag 107) used to identify first VPN in the first network comprising: 

An index and packet generating unit/router which generates a second VPN identifier used 
to identify a second VPN network in the second network based on the index, as the index is 
based on the destination address and the first identifier (LAN switch 103 on Fig. 1 and 3:7-14 
generating a second VLAN identifier by changing index/tag 107 as shown on Fig. 2 and 3:49-67, 
based on the index/tag in table 206 as shown on Fig. 2 and 5:2-33, according to the VLAN 
identifier replacement process 1:59-63); and 

A transmitter which transmits a packet having thereto said second VPN identifier (LAN 
switch 103 on Fig. 1 and 3:7-14). 

McCloghrie teaches networks as LANs utilizing the packets with MAC address (4:33-44) and 
use of layers 2 and 3 in the LAN switch 103 operation (disclosed on 2:42-46 and 3:24-37). 
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McCloghrie does not teach networks implementing IP and the IP packets including IP 
address wherein the packets are IP packets and VPN identifiers are on Layer 2 and the 
destination IP address is on layer 3. 

Chase teaches identifying Virtual Private Networks in IP environment, as switch 402 to 
connect a frame relay (or ATM) network to Virtual Private IP networks VPN A and VPN B, 
shown on Fig. 7 and 9 and disclosed on 5:45-6:12 and 6:51-7:12), wherein layer 2 frames carry 
layer 3 address information, which is extracted and used for routing the frames in Virtual Private 
IP networks, as disclosed on 3:25-41, including IP address on 4:42-44). 

It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to add implementing his method in IP environment, wherein the packets are IP packets 
and VPN identifiers are on Layer 2 and the destination IP address is on layer 3 of Chase to the 
system of McCloghrie to implement the method in widely used IP networks. 

6. Regarding claims 15, 19 and 23, McCloghrie teaches a route decision processing unit 
(LAN switch 103) which routes the packet to the second network according to destination 
address (MAC address 4:33-44) and information in the first header (VLAN identifier/tag 107 
4:62-64) using IP address of Chase instead of MAC address, as shown above. 

7. Regarding claims 14, 18 and 22, McCloghrie teaches replacing the index with a second 
VPN identifier (removing an identifier/tag of the first network with appropriate 
encapsulation/header and identifier for the second network 1:50-67 and 2:1-6). 
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Response to Arguments 

1 . Applicant's arguments filed 2/18/10 have been fully considered but they are not 
persuasive. 

On pages 10 and 1 1 of the Response, Applicant argues that implementing McCloghrie method in 
IP environment of Chase will result in a system patentably different from the claims, because a 
potential conflict in environment with multiple VPNs in the second network sharing the same IP 
address can be avoided. 
Examiner respectfully disagrees. 

Claims limitations are directed to the plurality of VPNs in the second network for a packet with 
an IP address without any indication of the VPNs using the same or different IP addresses. 

The claims limitations, directed to IP environment implementation, comprise operations 
of using destination IP address on layer 3 and using second VPN identifier on layer 2. 

These operations are essential for any transmission in IP environment on a particular 
VPN and are disclosed by Chase on 3:22-4:41. 

In addition, current claims limitations, directed to IP environment and use of VPN identifier, 
read on the operation of Prior Art system, as shown on Fig. 4 and described on page 13 of the 
disclosure. 

In the personal interview with the Attorney of 2/17/10, Examiner indicated that claims amended 
to reflect the system operation as shown on Fig. 5 and 6 and described on pages 13-15, are 
potentially allowable. 
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However, current claims comprise no limitations, directed to a security improvement in the 
router operation, by excluding mixing of the received packets in the router with other packets, 
shown on Fig. 5 and disclosed on [0015]. 

Applicant's arguments on pages 1 1 and 12, directed to Chase teaching of discarding layer 2 and 
layer 3 information, are irrelevant, as these features of the invention are not directly claimed. 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Dmitry H. Levitan whose telephone number is (571) 272-3093. 
The examiner can normally be reached on 8:30 to 4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Huy Vu can be reached on (571) 272-3155. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Dmitry H. Levitan/ 

Primary Examiner, Art Unit 246 1 



